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CLAIMS 

What is claimed is: 

1. A method for use by a first node on a network in determining the 
geographic location of a second node on the network, said method comprising the 
steps of; 

receiving a data packet over the network from the second node, the data 
packet including a network identifier for the second node and a Time-To-Live (TTL) 
field that has a value, wherein the value of the TTL field for the data packet indicates 
a maximum additional number of hops that could have been made by the data 
packet; and 

sending a probe packet addressed to the network identifier for the second 
node, wherein the probe packet also includes a TTL field, and wherein an initial 
value for the TTL field of the probe packet is set based on the value for the TTL field 
of the data packet. 

2. A method according to Claim 1 , further comprising steps of: 
receiving a response to the probe packet, the response including a network 

identifier for a router; and 

comparing the network identifier for the router to a database that includes a 
geographic location for each of plural network identifiers in order to identify a 
geographic location for the router. 

3. A method according to Claim 2, further comprising a step of using the 
geographic location for marketing purposes. 

4. A method according to Claim 2, further comprising a step of using the 
geographic location for compiling demographic information regarding site visitors. 

5. A method according to Claim 2, further comprising a step of caching the 
geographic location for use in responding to subsequent data packets from the 
second node. 
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6. A method according to Claim 2, wherein the geographic location 
identified for the router is identified as a geographic location for the second node. 

7. A method according to Claim 6, further comprising steps of: 
obtaining information that is based on the geographic location for the second 

node; and 

transmitting said information from the first node to the second node. 

8. A method according to Claim 1 , further comprising a step of sending a 
second probe packet prior to receiving a response from the probe packet. 

9. A method according to Claim 8, wherein the second probe packet has 
a TTL field, wherein an initial value for the TTL field of the second probe packet is 
set based on the TTL value of the data packet, and wherein the initial value set in the 
TTL field for the second probe packet is different than the initial value of the TTL field 

5 for the probe packet. 

1 0. A method according to Claim 1 , further comprising a step of sending a 
number of probe packets having a same initial value in their TTL fields, wherein the 
number of probe packets Is based on at least one of: value of the location 
information, an expected datagram loss rate, cost of bandwidth, availability of 

5 bandwidth, and network congestion control policies. 

11. A method according to Claim 1 , further comprising steps of: 
estimating a number of hops taken by the data packet based on the TTL field 

of the data packet; and 

sending plural probe packets addressed to the network identifier for the 
5 second node, wherein initial TTL values for a majority of the probe packets sent in 
response to the data packet are clustered around the number of hops estimated in 
said estimating step. 
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12. A method according to Claim 11 , wherein the initial TTL values for a 
majority of the probe packets sent in response to the data packet are set based on 
the number of hops estimated in said estimating step. 

13. A method according to Claim 1 1 , wherein the plural probe packets are 
sent without waiting to receive a response from any previously sent probe packet. 

14. A method according to Claim 11 , further comprising steps of: 

determining, based on responses to the plural probe packets, whether a 

routing anomaly exists; and 

if it is determined that a routing anomaly exists, sending a second set of probe 

5 packets. 

15. A method according to Claim 14, wherein it is determined in said 
determining step that asymmetric routing exists. 

16. A method according to Claim 14, wherein it is determined in said 
determining step that multi-path routing exists. 

17. A method according to Claim 1, wherein the data packet is a SYN 
packet requesting initiation of a TCP/IP connection, and wherein the probe packet 
Is sent prior to completion of handshaking required to Initiate the TCP/I P connection. 

18. A method for use by a first node on a network In determining the 
geographic location of a second node on the network, said method comprising the 
steps of: 

receiving a data packet from the second node, said data packet having arrived 
5 at the first node via an inbound path defined by an ordered sequence of routers; 

estimating a number of hops made by the data packet based on information 
contained within the data packet; and 

transmitting probe packets designed, based on said number of hops, to elicit 
responses from a group of network devices that primarily includes a first few routers 
10 on the inbound path. 
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19. A method according to Claim 18, further comprising steps of; 
receiving responses to the probe packets, each response including a network 

identifier for a responding network device; and 

comparing the network identifier included in at least one of the responses to 
a database that includes a geographic location for each of plural network identifiers 
in order to identify a geographic location for the responding network device. 

20. A method according to Claim 1 9, further comprising a step of identifying 
a geographic location for the second node as the geographic location for the router 
that is closest in number of hops to the second node from among the routers for 
which a geographic location was identified in said comparing step. 

21 . A method according to Claim 20, further comprising steps of obtaining 
information that is based on the geographic location for the second node and 
transmitting said information from the first node to the second node. 

22. A method according to Claim 1 8, wherein said estimating step estimates 
the number of hops that the data packet made based on a value in a Time-To-Live 
(TTL) field in the data packet. 

23. A method according to Claim 18, wherein each of the probe packets is 
designed to elicit a response from a network device upon the earlier to occur of: (i) 
a specified number of hops that is within a range of the number of hops that the data 
packet made ± N, where N is approximately 5, and (ii) encountering the second 
node. 

24. A method according to Claim 18, wherein the probe packets are sent 
concurrently with TCP/IP communications between the first node and the second 
node, 

25. A method according to Claim 18, wherein the probe packets are sent 
without waiting to receive a response from any previously sent probe packet. 
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26. A method according to Claim 18, wherein a number of the probe 
packets have a same initial value in their TIL fields, and wherein the number of said 
probe packets is based on at least one of: value of the location information, an 
expected datagram loss rate, cost of bandwidth, availability of bandwidth, and 
network congestion control policies. 

27. A method according to Claim 1 8, wherein the group of network devices 
from which responses are elicited consists essentially of a first N routers on the 
inbound path, where N is approximately 5. 

28. A method according to Claim 18, wherein initial Time-To-Live (TTL) 
values for a majority of the probe packets sent in response to the data packet are set 
based on the number of hops estimated in said estimating step. 

29. A method according to Claim 18, further comprising steps of: 
determining, based on responses to the transmitted probe packets, whether 

a routing anomaly exists; and 

if it is determined that a routing anomaly exists, transmitting a second set of 
probe packets. 

30. A method according to Claim 18, wherein the data packet is a SYN 
packet requesting initiation of a TCP/IP connection, and wherein transmission of the 
probe packets is initiated prior to completion of handshaking required to initiate the 
TCP/IP connection. 

31 . An apparatus for use by a first node on a network in determining the 
geographic location of a second node on the network, comprising: 

receiving means for receiving a data packet over the network from the second 
node, the data packet including a network identifier for the second node and a Time- 
To-Live (TTL) field that has a value, wherein the value of the TTL field for the data 
packet indicates a maximum additional number of hops that could have been made 
by the data packet; and 
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sending means for sending a probe packet addressed to the network identifier 
for the second node, wherein the probe packet also includes a TTL field, and 
wherein an initial value for the TTL field of the probe packet is set based on the value 
for the TTL field of the data packet. 

32. An apparatus for use by a first node on a network in determining the 
geographic location of a second node on the network, comprising: 

receiving means for receiving a data packet from the second node, said data 
packet having arrived at the first node via an inbound path defined by an ordered 
sequence of routers; 

estimating means for estimating a number of hops made by the data packet 
based on information contained within the data packet; and 

transmitting means for transmitting probe packets designed, based on said 
number of hops, to elicit responses from a group of network devices that primarily 
includes a first few routers on the inbound path. 

33. A computer-readable medium storing computer-executable process 
steps for use by a first node on a network in determining the geographic location of 
a second node on the network, said process steps comprising steps to: 

receive a data packet over the network from the second node, the data packet 
including a network identifier fbrthe second node and a Time-To-Live (TTL) field that 
has a value, wherein the value of the TTL field for the data packet indicates a 
maximum additional number of hops that could have been made by the data packet; 
and 

send a probe packet addressed to the network identifier for the second node, 
wherein the probe packet also includes a TTL field, and wherein an initial value for 
the TTL field of the probe packet is set based on the value for the TTL field of the 
data packet. 

34. A computer-readable medium storing computer-executable process 
steps for use by a first node on a network in determining the geographic location of 
a second node on the network, said process steps comprising steps to: 
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receive a data packet from the second node, said data packet having arrived 
5 at the first node via an inbound path defined by an ordered sequence of routers; 

estimate a number of hops made by the data packet based on information 
contained within the data packet; and 

transmit probe packets designed, based on said number of hops, to elicit 
responses from a group of network devices that primarily includes a first few routers 
10 on the inbound path. 

35. A method for responding to a web page request, said method 
comprising: 

receiving a request for a web page at a web server, said request originating 
from a requestor and being the first request received by the web server from the 
5 requestor; 

initiating a probe of at least a portion of the route between the web server and 
the requestor to identify a geographic location for the requestor, 

constructing the web page based on the geographic location identified for the 
requestor, and 
10 transmitting the web page to the requestor. 

36. An apparatus for responding to a web page request, said apparatus 
comprising: 

means for receiving a request for a web page at a web server, said request 
originating from a requestor and being the first request received by the web server 
5 from the requestor; 

means for initiating a probe of at least a portion of the route between the web 
server and the requestor to identify a geographic location for the requestor; 

means for constructing the web page based on the geographic location 
identified for the requestor, and 
10 means for transmitting the web page to the requestor. 

37. A computer-readable medium storing computer-executable process 
steps for responding to a web page request, said process steps comprising steps to: 

47 



0148065.3 



35479-00007 

receive a request for a web page at a web server, said request originating 
from a requestor and being the first request received by the web server from the 
requestor; 

initiate a probe of at least a portion of the route between the web server and 
the requestor to identify a geographic location for the requestor; 

construct the web page based on the geographic location identified for the 

requestor; and 

transmit the web page to the requestor. 
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